dependabot-composer 0.98.20 → 0.98.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: dc9c9411db31c5a0909114958fbc6509c5dcd50a38bb72892387fc2046f46fee
4
- data.tar.gz: 506f2874b20f196a3896253138b36fbefe8c7075d9b1cdf9a6e42a2465392d17
3
+ metadata.gz: c73cf36b54b1e218f255692bd1f9c2229baede4a4391712cf1d1fb2f9214350b
4
+ data.tar.gz: 8e884ba768c2826249e9ca5db79800efa2797258a5a11634d30b9c06f4655dbc
5
5
  SHA512:
6
- metadata.gz: c909e36e277a4d641389ffb69eb1ffec4aa2dca471103cc9193d9a9e027bc993453105c7dba1ec5609cd1ad758c50ba75f8c0cf9c36421b3ece9deec52a17612
7
- data.tar.gz: 8f8f904cb952c5490770a977a62975a1a087373052221e41e17ec640d1f43afa35842876323d6457b51349fa446f63c2d95295f23c4fc0096373c39acdbb9c79
6
+ metadata.gz: 3700198c7dd632aa35015a934210bedef7fc8344a1c1249a5fac28a08c20e4f0c15da52c87417d1fb5fe63af3072dcdf5654d6ae17b9a8820f7bc2df3e39341b
7
+ data.tar.gz: b8588ac2b752da94dad8de876bec08be43d8828e35c5ad26a6c74568e5c61078555b1258c76366be1b6d7df1ce9d6b9803fd2be6e878067df7ad27b1a7cbbcbf
@@ -1,6 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- require "shellwords"
4
3
  require "dependabot/shared_helpers"
5
4
  require "dependabot/errors"
6
5
  require "dependabot/composer/file_updater"
@@ -54,6 +53,7 @@ module Dependabot
54
53
  SharedHelpers.with_git_configured(credentials: credentials) do
55
54
  SharedHelpers.run_helper_subprocess(
56
55
  command: "php -d memory_limit=-1 #{php_helper_path}",
56
+ escape_command_str: false,
57
57
  function: "update",
58
58
  env: credentials_env,
59
59
  args: [
@@ -78,10 +78,10 @@ module Dependabot
78
78
  error.message.include?("Content-Length mismatch")
79
79
  end
80
80
 
81
- # rubocop:disable Metrics/PerceivedComplexity
82
81
  # rubocop:disable Metrics/AbcSize
83
82
  # rubocop:disable Metrics/CyclomaticComplexity
84
83
  # rubocop:disable Metrics/MethodLength
84
+ # rubocop:disable Metrics/PerceivedComplexity
85
85
  def handle_composer_errors(error)
86
86
  if error.message.start_with?("Failed to execute git checkout")
87
87
  raise git_dependency_reference_error(error)
@@ -130,10 +130,10 @@ module Dependabot
130
130
 
131
131
  raise error
132
132
  end
133
- # rubocop:enable Metrics/PerceivedComplexity
134
133
  # rubocop:enable Metrics/AbcSize
135
134
  # rubocop:enable Metrics/CyclomaticComplexity
136
135
  # rubocop:enable Metrics/MethodLength
136
+ # rubocop:enable Metrics/PerceivedComplexity
137
137
 
138
138
  def write_temporary_dependency_files
139
139
  path_dependencies.each do |file|
@@ -224,7 +224,7 @@ module Dependabot
224
224
 
225
225
  content_hash =
226
226
  SharedHelpers.run_helper_subprocess(
227
- command: Shellwords.join(["php", php_helper_path]),
227
+ command: "php #{php_helper_path}",
228
228
  function: "get_content_hash",
229
229
  env: credentials_env,
230
230
  args: [Dir.pwd]
@@ -66,6 +66,7 @@ module Dependabot
66
66
  SharedHelpers.with_git_configured(credentials: credentials) do
67
67
  SharedHelpers.run_helper_subprocess(
68
68
  command: "php -d memory_limit=-1 #{php_helper_path}",
69
+ escape_command_str: false,
69
70
  function: "get_latest_resolvable_version",
70
71
  args: [
71
72
  Dir.pwd,
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.98.20
4
+ version: 0.98.21
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.98.20
19
+ version: 0.98.21
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.98.20
26
+ version: 0.98.21
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement